2 BlueZ - Bluetooth protocol stack for Linux
3 Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
5 Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License version 2 as
9 published by the Free Software Foundation;
11 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
12 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
13 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
14 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
15 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
16 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
17 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
18 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
21 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
22 SOFTWARE IS DISCLAIMED.
28 #include <linux/idr.h>
29 #include <linux/leds.h>
30 #include <linux/rculist.h>
32 #include <net/bluetooth/hci.h>
33 #include <net/bluetooth/hci_sock.h>
36 #define HCI_PRIO_MAX 7
38 /* HCI maximum id value */
39 #define HCI_MAX_ID 10000
41 /* HCI Core structures */
45 __u8 pscan_period_mode;
53 struct inquiry_entry {
54 struct list_head all; /* inq_cache.all */
55 struct list_head list; /* unknown or resolve */
63 struct inquiry_data data;
66 struct discovery_state {
75 struct list_head all; /* All devices found during inquiry */
76 struct list_head unknown; /* Name state not known */
77 struct list_head resolve; /* Name needs to be resolved */
79 bdaddr_t last_adv_addr;
80 u8 last_adv_addr_type;
83 u8 last_adv_data[HCI_MAX_AD_LENGTH];
85 bool report_invalid_rssi;
86 bool result_filtering;
91 unsigned long scan_start;
92 unsigned long scan_duration;
95 #define SUSPEND_NOTIFIER_TIMEOUT msecs_to_jiffies(2000) /* 2 seconds */
98 SUSPEND_PAUSE_DISCOVERY,
99 SUSPEND_UNPAUSE_DISCOVERY,
101 SUSPEND_PAUSE_ADVERTISING,
102 SUSPEND_UNPAUSE_ADVERTISING,
104 SUSPEND_SCAN_DISABLE,
106 SUSPEND_DISCONNECTING,
108 SUSPEND_POWERING_DOWN,
110 SUSPEND_PREPARE_NOTIFIER,
112 SUSPEND_SET_ADV_FILTER,
116 enum suspended_state {
118 BT_SUSPEND_DISCONNECT,
119 BT_SUSPEND_CONFIGURE_WAKE,
122 struct hci_conn_hash {
123 struct list_head list;
124 unsigned int acl_num;
125 unsigned int amp_num;
126 unsigned int sco_num;
128 unsigned int le_num_peripheral;
132 struct list_head list;
137 struct bdaddr_list_with_irk {
138 struct list_head list;
145 struct bdaddr_list_with_flags {
146 struct list_head list;
152 enum hci_conn_flags {
153 HCI_CONN_FLAG_REMOTE_WAKEUP,
157 #define hci_conn_test_flag(nr, flags) ((flags) & (1U << nr))
159 /* Make sure number of flags doesn't exceed sizeof(current_flags) */
160 static_assert(HCI_CONN_FLAG_MAX < 32);
163 struct list_head list;
170 struct list_head list;
184 struct list_head list;
197 struct list_head list;
206 struct list_head list;
210 u8 val[HCI_LINK_KEY_SIZE];
215 struct list_head list;
226 struct list_head list;
232 __u16 remaining_time;
235 __u8 adv_data[HCI_MAX_EXT_AD_LENGTH];
237 __u8 scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
241 bdaddr_t random_addr;
243 struct delayed_work rpa_expired_cb;
246 #define HCI_MAX_ADV_INSTANCES 5
247 #define HCI_DEFAULT_ADV_DURATION 2
249 #define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F
252 struct list_head list;
256 __u8 value[HCI_MAX_AD_LENGTH];
259 struct adv_rssi_thresholds {
262 __u16 low_threshold_timeout;
263 __u16 high_threshold_timeout;
264 __u8 sampling_period;
268 struct list_head patterns;
269 struct adv_rssi_thresholds rssi;
273 ADV_MONITOR_STATE_NOT_REGISTERED,
274 ADV_MONITOR_STATE_REGISTERED,
275 ADV_MONITOR_STATE_OFFLOADED
279 #define HCI_MIN_ADV_MONITOR_HANDLE 1
280 #define HCI_MAX_ADV_MONITOR_NUM_HANDLES 32
281 #define HCI_MAX_ADV_MONITOR_NUM_PATTERNS 16
282 #define HCI_ADV_MONITOR_EXT_NONE 1
283 #define HCI_ADV_MONITOR_EXT_MSFT 2
285 #define HCI_MAX_SHORT_NAME_LENGTH 10
287 /* Min encryption key size to match with SMP */
288 #define HCI_MIN_ENC_KEY_SIZE 7
290 /* Default LE RPA expiry time, 15 minutes */
291 #define HCI_DEFAULT_RPA_TIMEOUT (15 * 60)
293 /* Default min/max age of connection information (1s/3s) */
294 #define DEFAULT_CONN_INFO_MIN_AGE 1000
295 #define DEFAULT_CONN_INFO_MAX_AGE 3000
296 /* Default authenticated payload timeout 30s */
297 #define DEFAULT_AUTH_PAYLOAD_TIMEOUT 0x0bb8
304 __u8 data[HCI_MAX_AMP_ASSOC_SIZE];
307 #define HCI_MAX_PAGES 3
310 #define HCI_MAX_EIR_MANUFACTURER_DATA_LENGTH 100
314 struct list_head list;
324 bdaddr_t public_addr;
325 bdaddr_t random_addr;
326 bdaddr_t static_addr;
328 __u8 dev_name[HCI_MAX_NAME_LENGTH];
329 __u8 short_name[HCI_MAX_SHORT_NAME_LENGTH];
330 __u8 eir[HCI_MAX_EIR_LENGTH];
336 __u8 features[HCI_MAX_PAGES][8];
338 __u8 le_accept_list_size;
339 __u8 le_resolv_list_size;
340 __u8 le_num_of_adv_sets;
350 __u8 stored_max_keys;
351 __u8 stored_num_keys;
354 __u8 err_data_reporting;
355 __u16 page_scan_interval;
356 __u16 page_scan_window;
358 __u8 le_adv_channel_map;
359 __u16 le_adv_min_interval;
360 __u16 le_adv_max_interval;
362 __u16 le_scan_interval;
363 __u16 le_scan_window;
364 __u16 le_scan_int_suspend;
365 __u16 le_scan_window_suspend;
366 __u16 le_scan_int_discovery;
367 __u16 le_scan_window_discovery;
368 __u16 le_scan_int_adv_monitor;
369 __u16 le_scan_window_adv_monitor;
370 __u16 le_scan_int_connect;
371 __u16 le_scan_window_connect;
372 __u16 le_conn_min_interval;
373 __u16 le_conn_max_interval;
374 __u16 le_conn_latency;
375 __u16 le_supv_timeout;
377 __u16 le_def_tx_time;
379 __u16 le_max_tx_time;
381 __u16 le_max_rx_time;
382 __u8 le_max_key_size;
383 __u8 le_min_key_size;
384 __u16 discov_interleaved_timeout;
385 __u16 conn_info_min_age;
386 __u16 conn_info_max_age;
387 __u16 auth_payload_timeout;
388 __u8 min_enc_key_size;
389 __u8 max_enc_key_size;
394 __u16 advmon_allowlist_duration;
395 __u16 advmon_no_filter_duration;
396 __u8 enable_advmon_interleave_scan;
403 __u8 def_page_scan_type;
404 __u16 def_page_scan_int;
405 __u16 def_page_scan_window;
406 __u8 def_inq_scan_type;
407 __u16 def_inq_scan_int;
408 __u16 def_inq_scan_window;
410 __u16 def_page_timeout;
411 __u16 def_multi_adv_rotation_duration;
412 __u16 def_le_autoconnect_timeout;
413 __s8 min_le_tx_power;
414 __s8 max_le_tx_power;
422 __u16 sniff_min_interval;
423 __u16 sniff_max_interval;
428 __u32 amp_min_latency;
432 __u16 amp_assoc_size;
433 __u32 amp_max_flush_to;
434 __u32 amp_be_flush_to;
436 struct amp_assoc loc_assoc;
440 unsigned int auto_accept_delay;
442 unsigned long quirks;
445 unsigned int acl_cnt;
446 unsigned int sco_cnt;
449 unsigned int acl_mtu;
450 unsigned int sco_mtu;
452 unsigned int acl_pkts;
453 unsigned int sco_pkts;
454 unsigned int le_pkts;
461 unsigned long acl_last_tx;
462 unsigned long sco_last_tx;
463 unsigned long le_last_tx;
468 struct workqueue_struct *workqueue;
469 struct workqueue_struct *req_workqueue;
471 struct work_struct power_on;
472 struct delayed_work power_off;
473 struct work_struct error_reset;
475 __u16 discov_timeout;
476 struct delayed_work discov_off;
478 struct delayed_work service_cache;
480 struct delayed_work cmd_timer;
481 struct delayed_work ncmd_timer;
483 struct work_struct rx_work;
484 struct work_struct cmd_work;
485 struct work_struct tx_work;
487 struct work_struct discov_update;
488 struct work_struct bg_scan_update;
489 struct work_struct scan_update;
490 struct work_struct connectable_update;
491 struct work_struct discoverable_update;
492 struct delayed_work le_scan_disable;
493 struct delayed_work le_scan_restart;
495 struct sk_buff_head rx_q;
496 struct sk_buff_head raw_q;
497 struct sk_buff_head cmd_q;
499 struct sk_buff *sent_cmd;
501 struct mutex req_lock;
502 wait_queue_head_t req_wait_q;
505 struct sk_buff *req_skb;
508 void *smp_bredr_data;
510 struct discovery_state discovery;
512 int discovery_old_state;
513 bool discovery_paused;
514 int advertising_old_state;
515 bool advertising_paused;
517 struct notifier_block suspend_notifier;
518 struct work_struct suspend_prepare;
519 enum suspended_state suspend_state_next;
520 enum suspended_state suspend_state;
521 bool scanning_paused;
527 wait_queue_head_t suspend_wait_q;
528 DECLARE_BITMAP(suspend_tasks, __SUSPEND_NUM_TASKS);
531 struct discovery_state le_discovery;
533 struct hci_conn_hash conn_hash;
535 struct list_head mgmt_pending;
536 struct list_head reject_list;
537 struct list_head accept_list;
538 struct list_head uuids;
539 struct list_head link_keys;
540 struct list_head long_term_keys;
541 struct list_head identity_resolving_keys;
542 struct list_head remote_oob_data;
543 struct list_head le_accept_list;
544 struct list_head le_resolv_list;
545 struct list_head le_conn_params;
546 struct list_head pend_le_conns;
547 struct list_head pend_le_reports;
548 struct list_head blocked_keys;
550 struct hci_dev_stats stat;
556 struct dentry *debugfs;
560 struct rfkill *rfkill;
562 DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
565 __u8 adv_data[HCI_MAX_EXT_AD_LENGTH];
567 __u8 scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
568 __u8 scan_rsp_data_len;
570 struct list_head adv_instances;
571 unsigned int adv_instance_cnt;
572 __u8 cur_adv_instance;
573 __u16 adv_instance_timeout;
574 struct delayed_work adv_instance_expire;
576 struct idr adv_monitors_idr;
577 unsigned int adv_monitors_cnt;
581 struct delayed_work rpa_expired;
585 INTERLEAVE_SCAN_NONE,
586 INTERLEAVE_SCAN_NO_FILTER,
587 INTERLEAVE_SCAN_ALLOWLIST
588 } interleave_scan_state;
590 struct delayed_work interleave_scan;
592 #if IS_ENABLED(CONFIG_BT_LEDS)
593 struct led_trigger *power_led;
596 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
599 bool msft_curve_validity;
602 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
607 __u8 adv_filter_policy;
609 __u8 manufacturer_len;
610 __u8 manufacturer_data[HCI_MAX_EIR_MANUFACTURER_DATA_LENGTH];
613 int (*open)(struct hci_dev *hdev);
614 int (*close)(struct hci_dev *hdev);
615 int (*flush)(struct hci_dev *hdev);
616 int (*setup)(struct hci_dev *hdev);
617 int (*shutdown)(struct hci_dev *hdev);
618 int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
619 void (*notify)(struct hci_dev *hdev, unsigned int evt);
620 void (*hw_error)(struct hci_dev *hdev, u8 code);
621 int (*post_init)(struct hci_dev *hdev);
622 int (*set_diag)(struct hci_dev *hdev, bool enable);
623 int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
624 void (*cmd_timeout)(struct hci_dev *hdev);
625 bool (*prevent_wake)(struct hci_dev *hdev);
628 #define HCI_PHY_HANDLE(handle) (handle & 0xff)
631 CONN_REASON_PAIR_DEVICE,
632 CONN_REASON_L2CAP_CHAN,
633 CONN_REASON_SCO_CONNECT,
637 struct list_head list;
658 __u8 features[HCI_MAX_PAGES][8];
664 __u8 pending_sec_level;
668 __u32 passkey_notify;
669 __u8 passkey_entered;
673 __u16 auth_payload_timeout;
674 __u16 le_conn_min_interval;
675 __u16 le_conn_max_interval;
676 __u16 le_conn_interval;
677 __u16 le_conn_latency;
678 __u16 le_supv_timeout;
679 __u8 le_adv_data[HCI_MAX_AD_LENGTH];
680 __u8 le_adv_data_len;
688 enum conn_reasons conn_reason;
691 __u16 clock_accuracy;
693 unsigned long conn_info_timestamp;
701 struct sk_buff_head data_q;
702 struct list_head chan_list;
704 struct delayed_work disc_work;
705 struct delayed_work auto_accept_work;
706 struct delayed_work idle_work;
707 struct delayed_work le_conn_timeout;
708 struct work_struct le_scan_cleanup;
711 struct dentry *debugfs;
713 struct hci_dev *hdev;
716 struct amp_mgr *amp_mgr;
723 struct hci_conn *link;
725 void (*connect_cfm_cb) (struct hci_conn *conn, u8 status);
726 void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
727 void (*disconn_cfm_cb) (struct hci_conn *conn, u8 reason);
731 struct list_head list;
733 struct hci_conn *conn;
734 struct sk_buff_head data_q;
740 struct hci_conn_params {
741 struct list_head list;
742 struct list_head action;
747 u16 conn_min_interval;
748 u16 conn_max_interval;
750 u16 supervision_timeout;
753 HCI_AUTO_CONN_DISABLED,
754 HCI_AUTO_CONN_REPORT,
755 HCI_AUTO_CONN_DIRECT,
756 HCI_AUTO_CONN_ALWAYS,
757 HCI_AUTO_CONN_LINK_LOSS,
758 HCI_AUTO_CONN_EXPLICIT,
761 struct hci_conn *conn;
762 bool explicit_connect;
766 extern struct list_head hci_dev_list;
767 extern struct list_head hci_cb_list;
768 extern rwlock_t hci_dev_list_lock;
769 extern struct mutex hci_cb_list_lock;
771 #define hci_dev_set_flag(hdev, nr) set_bit((nr), (hdev)->dev_flags)
772 #define hci_dev_clear_flag(hdev, nr) clear_bit((nr), (hdev)->dev_flags)
773 #define hci_dev_change_flag(hdev, nr) change_bit((nr), (hdev)->dev_flags)
774 #define hci_dev_test_flag(hdev, nr) test_bit((nr), (hdev)->dev_flags)
775 #define hci_dev_test_and_set_flag(hdev, nr) test_and_set_bit((nr), (hdev)->dev_flags)
776 #define hci_dev_test_and_clear_flag(hdev, nr) test_and_clear_bit((nr), (hdev)->dev_flags)
777 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
779 #define hci_dev_clear_volatile_flags(hdev) \
781 hci_dev_clear_flag(hdev, HCI_LE_SCAN); \
782 hci_dev_clear_flag(hdev, HCI_LE_ADV); \
783 hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
784 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ); \
787 /* ----- HCI interface to upper protocols ----- */
788 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
789 int l2cap_disconn_ind(struct hci_conn *hcon);
790 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
792 #if IS_ENABLED(CONFIG_BT_BREDR)
793 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
794 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
796 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
802 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
807 /* ----- Inquiry cache ----- */
808 #define INQUIRY_CACHE_AGE_MAX (HZ*30) /* 30 seconds */
809 #define INQUIRY_ENTRY_AGE_MAX (HZ*60) /* 60 seconds */
811 static inline void discovery_init(struct hci_dev *hdev)
813 hdev->discovery.state = DISCOVERY_STOPPED;
814 INIT_LIST_HEAD(&hdev->discovery.all);
815 INIT_LIST_HEAD(&hdev->discovery.unknown);
816 INIT_LIST_HEAD(&hdev->discovery.resolve);
817 hdev->discovery.report_invalid_rssi = true;
818 hdev->discovery.rssi = HCI_RSSI_INVALID;
821 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
823 hdev->discovery.result_filtering = false;
824 hdev->discovery.report_invalid_rssi = true;
825 hdev->discovery.rssi = HCI_RSSI_INVALID;
826 hdev->discovery.uuid_count = 0;
827 kfree(hdev->discovery.uuids);
828 hdev->discovery.uuids = NULL;
829 hdev->discovery.scan_start = 0;
830 hdev->discovery.scan_duration = 0;
833 bool hci_discovery_active(struct hci_dev *hdev);
835 void hci_discovery_set_state(struct hci_dev *hdev, int state);
837 static inline int inquiry_cache_empty(struct hci_dev *hdev)
839 return list_empty(&hdev->discovery.all);
842 static inline long inquiry_cache_age(struct hci_dev *hdev)
844 struct discovery_state *c = &hdev->discovery;
845 return jiffies - c->timestamp;
848 static inline long inquiry_entry_age(struct inquiry_entry *e)
850 return jiffies - e->timestamp;
853 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
855 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
857 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
860 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
861 struct inquiry_entry *ie);
862 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
864 void hci_inquiry_cache_flush(struct hci_dev *hdev);
866 /* ----- HCI Connections ----- */
868 #define LINK_SUPERVISION_TIMEOUT 0x1F40 /* n * 0.625 = 5 seconds */
869 #endif /* TIZEN_BT */
873 HCI_CONN_REAUTH_PEND,
874 HCI_CONN_ENCRYPT_PEND,
875 HCI_CONN_RSWITCH_PEND,
876 HCI_CONN_MODE_CHANGE_PEND,
877 HCI_CONN_SCO_SETUP_PEND,
878 HCI_CONN_MGMT_CONNECTED,
879 HCI_CONN_SSP_ENABLED,
888 HCI_CONN_STK_ENCRYPT,
889 HCI_CONN_AUTH_INITIATOR,
891 HCI_CONN_PARAM_REMOVAL_PEND,
892 HCI_CONN_NEW_LINK_KEY,
894 HCI_CONN_AUTH_FAILURE,
897 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
899 struct hci_dev *hdev = conn->hdev;
900 return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
901 test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
904 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
906 struct hci_dev *hdev = conn->hdev;
907 return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
908 test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
911 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
913 struct hci_conn_hash *h = &hdev->conn_hash;
914 list_add_rcu(&c->list, &h->list);
924 if (c->role == HCI_ROLE_SLAVE)
925 h->le_num_peripheral++;
934 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
936 struct hci_conn_hash *h = &hdev->conn_hash;
938 list_del_rcu(&c->list);
950 if (c->role == HCI_ROLE_SLAVE)
951 h->le_num_peripheral--;
960 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
962 struct hci_conn_hash *h = &hdev->conn_hash;
978 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
980 struct hci_conn_hash *c = &hdev->conn_hash;
982 return c->acl_num + c->amp_num + c->sco_num + c->le_num;
985 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
987 struct hci_conn_hash *h = &hdev->conn_hash;
989 __u8 type = INVALID_LINK;
993 list_for_each_entry_rcu(c, &h->list, list) {
994 if (c->handle == handle) {
1005 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
1008 struct hci_conn_hash *h = &hdev->conn_hash;
1013 list_for_each_entry_rcu(c, &h->list, list) {
1014 if (c->handle == handle) {
1024 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
1025 __u8 type, bdaddr_t *ba)
1027 struct hci_conn_hash *h = &hdev->conn_hash;
1032 list_for_each_entry_rcu(c, &h->list, list) {
1033 if (c->type == type && !bacmp(&c->dst, ba)) {
1044 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
1048 struct hci_conn_hash *h = &hdev->conn_hash;
1053 list_for_each_entry_rcu(c, &h->list, list) {
1054 if (c->type != LE_LINK)
1057 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1068 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1069 __u8 type, __u16 state)
1071 struct hci_conn_hash *h = &hdev->conn_hash;
1076 list_for_each_entry_rcu(c, &h->list, list) {
1077 if (c->type == type && c->state == state) {
1088 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
1090 struct hci_conn_hash *h = &hdev->conn_hash;
1095 list_for_each_entry_rcu(c, &h->list, list) {
1096 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1097 !test_bit(HCI_CONN_SCANNING, &c->flags)) {
1109 static inline bool hci_conn_rssi_state_set(struct hci_dev *hdev,
1110 __u8 type, bdaddr_t *ba, bool value)
1112 struct hci_conn_hash *h = &hdev->conn_hash;
1117 conn_type = LE_LINK;
1119 conn_type = ACL_LINK;
1123 list_for_each_entry_rcu(c, &h->list, list) {
1124 if (c->type == conn_type && !bacmp(&c->dst, ba)) {
1125 c->rssi_monitored = value;
1135 static inline void hci_conn_rssi_unset_all(struct hci_dev *hdev,
1138 struct hci_conn_hash *h = &hdev->conn_hash;
1143 conn_type = LE_LINK;
1145 conn_type = ACL_LINK;
1148 list_for_each_entry_rcu(c, &h->list, list) {
1149 if (c->type == conn_type)
1150 c->rssi_monitored = false;
1155 static inline int hci_conn_hash_lookup_rssi_count(struct hci_dev *hdev)
1157 struct hci_conn_hash *h = &hdev->conn_hash;
1162 list_for_each_entry_rcu(c, &h->list, list) {
1163 if (c->rssi_monitored == true)
1171 int hci_conn_change_supervision_timeout(struct hci_conn *conn, __u16 timeout);
1172 bool hci_le_discovery_active(struct hci_dev *hdev);
1173 void hci_le_discovery_set_state(struct hci_dev *hdev, int state);
1175 static inline struct hci_conn *hci_conn_hash_lookup_sco(struct hci_dev *hdev)
1177 struct hci_conn_hash *h = &hdev->conn_hash;
1181 list_for_each_entry_rcu(c, &h->list, list) {
1182 if (c->type == SCO_LINK || c->type == ESCO_LINK) {
1193 int hci_disconnect(struct hci_conn *conn, __u8 reason);
1194 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1195 void hci_sco_setup(struct hci_conn *conn, __u8 status);
1197 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
1199 int hci_conn_del(struct hci_conn *conn);
1200 void hci_conn_hash_flush(struct hci_dev *hdev);
1201 void hci_conn_check_pending(struct hci_dev *hdev);
1203 struct hci_chan *hci_chan_create(struct hci_conn *conn);
1204 void hci_chan_del(struct hci_chan *chan);
1205 void hci_chan_list_flush(struct hci_conn *conn);
1206 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1208 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
1209 u8 dst_type, u8 sec_level,
1211 enum conn_reasons conn_reason);
1212 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1213 u8 dst_type, u8 sec_level, u16 conn_timeout,
1214 u8 role, bdaddr_t *direct_rpa);
1215 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1216 u8 sec_level, u8 auth_type,
1217 enum conn_reasons conn_reason);
1218 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
1220 int hci_conn_check_link_mode(struct hci_conn *conn);
1221 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1222 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
1224 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
1226 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
1228 void hci_le_conn_failed(struct hci_conn *conn, u8 status);
1231 * hci_conn_get() and hci_conn_put() are used to control the life-time of an
1232 * "hci_conn" object. They do not guarantee that the hci_conn object is running,
1233 * working or anything else. They just guarantee that the object is available
1234 * and can be dereferenced. So you can use its locks, local variables and any
1235 * other constant data.
1236 * Before accessing runtime data, you _must_ lock the object and then check that
1237 * it is still running. As soon as you release the locks, the connection might
1238 * get dropped, though.
1240 * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
1241 * how long the underlying connection is held. So every channel that runs on the
1242 * hci_conn object calls this to prevent the connection from disappearing. As
1243 * long as you hold a device, you must also guarantee that you have a valid
1244 * reference to the device via hci_conn_get() (or the initial reference from
1246 * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
1247 * break because nobody cares for that. But this means, we cannot use
1248 * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
1251 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1253 get_device(&conn->dev);
1257 static inline void hci_conn_put(struct hci_conn *conn)
1259 put_device(&conn->dev);
1262 static inline void hci_conn_hold(struct hci_conn *conn)
1264 BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1266 atomic_inc(&conn->refcnt);
1267 cancel_delayed_work(&conn->disc_work);
1270 static inline void hci_conn_drop(struct hci_conn *conn)
1272 BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1274 if (atomic_dec_and_test(&conn->refcnt)) {
1275 unsigned long timeo;
1277 switch (conn->type) {
1280 cancel_delayed_work(&conn->idle_work);
1281 if (conn->state == BT_CONNECTED) {
1282 timeo = conn->disc_timeout;
1291 timeo = conn->disc_timeout;
1299 cancel_delayed_work(&conn->disc_work);
1300 queue_delayed_work(conn->hdev->workqueue,
1301 &conn->disc_work, timeo);
1305 /* ----- HCI Devices ----- */
1306 static inline void hci_dev_put(struct hci_dev *d)
1308 BT_DBG("%s orig refcnt %d", d->name,
1309 kref_read(&d->dev.kobj.kref));
1311 put_device(&d->dev);
1314 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1316 BT_DBG("%s orig refcnt %d", d->name,
1317 kref_read(&d->dev.kobj.kref));
1319 get_device(&d->dev);
1323 #define hci_dev_lock(d) mutex_lock(&d->lock)
1324 #define hci_dev_unlock(d) mutex_unlock(&d->lock)
1326 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1327 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1329 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1331 return dev_get_drvdata(&hdev->dev);
1334 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1336 dev_set_drvdata(&hdev->dev, data);
1339 static inline void *hci_get_priv(struct hci_dev *hdev)
1341 return (char *)hdev + sizeof(*hdev);
1344 struct hci_dev *hci_dev_get(int index);
1345 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1347 struct hci_dev *hci_alloc_dev_priv(int sizeof_priv);
1349 static inline struct hci_dev *hci_alloc_dev(void)
1351 return hci_alloc_dev_priv(0);
1354 void hci_free_dev(struct hci_dev *hdev);
1355 int hci_register_dev(struct hci_dev *hdev);
1356 void hci_unregister_dev(struct hci_dev *hdev);
1357 void hci_release_dev(struct hci_dev *hdev);
1358 int hci_suspend_dev(struct hci_dev *hdev);
1359 int hci_resume_dev(struct hci_dev *hdev);
1360 int hci_reset_dev(struct hci_dev *hdev);
1361 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1362 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1363 __printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1364 __printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1366 static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
1368 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
1369 hdev->msft_opcode = opcode;
1373 static inline void hci_set_aosp_capable(struct hci_dev *hdev)
1375 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
1376 hdev->aosp_capable = true;
1380 int hci_dev_open(__u16 dev);
1381 int hci_dev_close(__u16 dev);
1382 int hci_dev_do_close(struct hci_dev *hdev);
1383 int hci_dev_reset(__u16 dev);
1384 int hci_dev_reset_stat(__u16 dev);
1385 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1386 int hci_get_dev_list(void __user *arg);
1387 int hci_get_dev_info(void __user *arg);
1388 int hci_get_conn_list(void __user *arg);
1389 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1390 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1392 u32 get_link_mode(struct hci_conn *conn);
1394 int hci_inquiry(void __user *arg);
1396 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1397 bdaddr_t *bdaddr, u8 type);
1398 struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
1399 struct list_head *list, bdaddr_t *bdaddr,
1401 struct bdaddr_list_with_flags *
1402 hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1404 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1405 int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1406 u8 type, u8 *peer_irk, u8 *local_irk);
1407 int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1408 u8 type, u32 flags);
1409 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1410 int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1412 int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1414 void hci_bdaddr_list_clear(struct list_head *list);
1416 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1417 bdaddr_t *addr, u8 addr_type);
1418 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1419 bdaddr_t *addr, u8 addr_type);
1420 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1421 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1423 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1427 void hci_uuids_clear(struct hci_dev *hdev);
1429 void hci_link_keys_clear(struct hci_dev *hdev);
1430 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1431 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1432 bdaddr_t *bdaddr, u8 *val, u8 type,
1433 u8 pin_len, bool *persistent);
1434 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1435 u8 addr_type, u8 type, u8 authenticated,
1436 u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1437 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1438 u8 addr_type, u8 role);
1439 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1440 void hci_smp_ltks_clear(struct hci_dev *hdev);
1441 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1443 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1444 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1446 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1447 u8 addr_type, u8 val[16], bdaddr_t *rpa);
1448 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1449 bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
1450 void hci_blocked_keys_clear(struct hci_dev *hdev);
1451 void hci_smp_irks_clear(struct hci_dev *hdev);
1453 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1455 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1456 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1457 bdaddr_t *bdaddr, u8 bdaddr_type);
1458 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1459 u8 bdaddr_type, u8 *hash192, u8 *rand192,
1460 u8 *hash256, u8 *rand256);
1461 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1464 void hci_adv_instances_clear(struct hci_dev *hdev);
1465 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1466 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1467 int hci_add_adv_instance(struct hci_dev *hdev, u8 instance, u32 flags,
1468 u16 adv_data_len, u8 *adv_data,
1469 u16 scan_rsp_len, u8 *scan_rsp_data,
1470 u16 timeout, u16 duration, s8 tx_power,
1471 u32 min_interval, u32 max_interval);
1472 int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
1473 u16 adv_data_len, u8 *adv_data,
1474 u16 scan_rsp_len, u8 *scan_rsp_data);
1475 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1476 void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1478 void hci_adv_monitors_clear(struct hci_dev *hdev);
1479 void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1480 int hci_add_adv_patterns_monitor_complete(struct hci_dev *hdev, u8 status);
1481 int hci_remove_adv_monitor_complete(struct hci_dev *hdev, u8 status);
1482 bool hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor,
1484 bool hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle, int *err);
1485 bool hci_remove_all_adv_monitor(struct hci_dev *hdev, int *err);
1486 bool hci_is_adv_monitoring(struct hci_dev *hdev);
1487 int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1489 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1491 void hci_init_sysfs(struct hci_dev *hdev);
1492 void hci_conn_init_sysfs(struct hci_conn *conn);
1493 void hci_conn_add_sysfs(struct hci_conn *conn);
1494 void hci_conn_del_sysfs(struct hci_conn *conn);
1496 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1498 /* ----- LMP capabilities ----- */
1499 #define lmp_encrypt_capable(dev) ((dev)->features[0][0] & LMP_ENCRYPT)
1500 #define lmp_rswitch_capable(dev) ((dev)->features[0][0] & LMP_RSWITCH)
1501 #define lmp_hold_capable(dev) ((dev)->features[0][0] & LMP_HOLD)
1502 #define lmp_sniff_capable(dev) ((dev)->features[0][0] & LMP_SNIFF)
1503 #define lmp_park_capable(dev) ((dev)->features[0][1] & LMP_PARK)
1504 #define lmp_inq_rssi_capable(dev) ((dev)->features[0][3] & LMP_RSSI_INQ)
1505 #define lmp_esco_capable(dev) ((dev)->features[0][3] & LMP_ESCO)
1506 #define lmp_bredr_capable(dev) (!((dev)->features[0][4] & LMP_NO_BREDR))
1507 #define lmp_le_capable(dev) ((dev)->features[0][4] & LMP_LE)
1508 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1509 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1510 #define lmp_esco_2m_capable(dev) ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1511 #define lmp_ext_inq_capable(dev) ((dev)->features[0][6] & LMP_EXT_INQ)
1512 #define lmp_le_br_capable(dev) (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1513 #define lmp_ssp_capable(dev) ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1514 #define lmp_no_flush_capable(dev) ((dev)->features[0][6] & LMP_NO_FLUSH)
1515 #define lmp_lsto_capable(dev) ((dev)->features[0][7] & LMP_LSTO)
1516 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1517 #define lmp_ext_feat_capable(dev) ((dev)->features[0][7] & LMP_EXTFEATURES)
1518 #define lmp_transp_capable(dev) ((dev)->features[0][2] & LMP_TRANSPARENT)
1519 #define lmp_edr_2m_capable(dev) ((dev)->features[0][3] & LMP_EDR_2M)
1520 #define lmp_edr_3m_capable(dev) ((dev)->features[0][3] & LMP_EDR_3M)
1521 #define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
1522 #define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
1524 /* ----- Extended LMP capabilities ----- */
1525 #define lmp_cpb_central_capable(dev) ((dev)->features[2][0] & LMP_CPB_CENTRAL)
1526 #define lmp_cpb_peripheral_capable(dev) ((dev)->features[2][0] & LMP_CPB_PERIPHERAL)
1527 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1528 #define lmp_sync_scan_capable(dev) ((dev)->features[2][0] & LMP_SYNC_SCAN)
1529 #define lmp_sc_capable(dev) ((dev)->features[2][1] & LMP_SC)
1530 #define lmp_ping_capable(dev) ((dev)->features[2][1] & LMP_PING)
1532 /* ----- Host capabilities ----- */
1533 #define lmp_host_ssp_capable(dev) ((dev)->features[1][0] & LMP_HOST_SSP)
1534 #define lmp_host_sc_capable(dev) ((dev)->features[1][0] & LMP_HOST_SC)
1535 #define lmp_host_le_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE))
1536 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1538 #define hdev_is_powered(dev) (test_bit(HCI_UP, &(dev)->flags) && \
1539 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1540 #define bredr_sc_enabled(dev) (lmp_sc_capable(dev) && \
1541 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1542 #define rpa_valid(dev) (bacmp(&dev->rpa, BDADDR_ANY) && \
1543 !hci_dev_test_flag(dev, HCI_RPA_EXPIRED))
1544 #define adv_rpa_valid(adv) (bacmp(&adv->random_addr, BDADDR_ANY) && \
1547 #define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
1548 ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))
1550 #define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
1551 ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))
1553 #define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
1554 ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))
1556 /* Use LL Privacy based address resolution if supported */
1557 #define use_ll_privacy(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)
1559 /* Use ext scanning if set ext scan param and ext scan enable is supported */
1560 #define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
1561 ((dev)->commands[37] & 0x40))
1562 /* Use ext create connection if command is supported */
1563 #define use_ext_conn(dev) ((dev)->commands[37] & 0x80)
1565 /* Extended advertising support */
1566 #define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))
1568 /* ----- HCI protocols ----- */
1569 #define HCI_PROTO_DEFER 0x01
1571 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1572 __u8 type, __u8 *flags)
1576 return l2cap_connect_ind(hdev, bdaddr);
1580 return sco_connect_ind(hdev, bdaddr, flags);
1583 BT_ERR("unknown link type %d", type);
1588 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1590 if (conn->type != ACL_LINK && conn->type != LE_LINK)
1591 return HCI_ERROR_REMOTE_USER_TERM;
1593 return l2cap_disconn_ind(conn);
1596 /* ----- HCI callbacks ----- */
1598 struct list_head list;
1602 void (*connect_cfm) (struct hci_conn *conn, __u8 status);
1603 void (*disconn_cfm) (struct hci_conn *conn, __u8 status);
1604 void (*security_cfm) (struct hci_conn *conn, __u8 status,
1606 void (*key_change_cfm) (struct hci_conn *conn, __u8 status);
1607 void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1610 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1614 mutex_lock(&hci_cb_list_lock);
1615 list_for_each_entry(cb, &hci_cb_list, list) {
1616 if (cb->connect_cfm)
1617 cb->connect_cfm(conn, status);
1619 mutex_unlock(&hci_cb_list_lock);
1621 if (conn->connect_cfm_cb)
1622 conn->connect_cfm_cb(conn, status);
1625 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1629 mutex_lock(&hci_cb_list_lock);
1630 list_for_each_entry(cb, &hci_cb_list, list) {
1631 if (cb->disconn_cfm)
1632 cb->disconn_cfm(conn, reason);
1634 mutex_unlock(&hci_cb_list_lock);
1636 if (conn->disconn_cfm_cb)
1637 conn->disconn_cfm_cb(conn, reason);
1640 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1645 if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1648 encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1650 mutex_lock(&hci_cb_list_lock);
1651 list_for_each_entry(cb, &hci_cb_list, list) {
1652 if (cb->security_cfm)
1653 cb->security_cfm(conn, status, encrypt);
1655 mutex_unlock(&hci_cb_list_lock);
1657 if (conn->security_cfm_cb)
1658 conn->security_cfm_cb(conn, status);
1661 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
1666 if (conn->state == BT_CONFIG) {
1668 conn->state = BT_CONNECTED;
1670 hci_connect_cfm(conn, status);
1671 hci_conn_drop(conn);
1675 if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
1677 else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
1683 if (conn->sec_level == BT_SECURITY_SDP)
1684 conn->sec_level = BT_SECURITY_LOW;
1686 if (conn->pending_sec_level > conn->sec_level)
1687 conn->sec_level = conn->pending_sec_level;
1690 mutex_lock(&hci_cb_list_lock);
1691 list_for_each_entry(cb, &hci_cb_list, list) {
1692 if (cb->security_cfm)
1693 cb->security_cfm(conn, status, encrypt);
1695 mutex_unlock(&hci_cb_list_lock);
1697 if (conn->security_cfm_cb)
1698 conn->security_cfm_cb(conn, status);
1701 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
1705 mutex_lock(&hci_cb_list_lock);
1706 list_for_each_entry(cb, &hci_cb_list, list) {
1707 if (cb->key_change_cfm)
1708 cb->key_change_cfm(conn, status);
1710 mutex_unlock(&hci_cb_list_lock);
1713 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
1718 mutex_lock(&hci_cb_list_lock);
1719 list_for_each_entry(cb, &hci_cb_list, list) {
1720 if (cb->role_switch_cfm)
1721 cb->role_switch_cfm(conn, status, role);
1723 mutex_unlock(&hci_cb_list_lock);
1726 static inline void *eir_get_data(u8 *eir, size_t eir_len, u8 type,
1734 while (parsed < eir_len - 1) {
1735 u8 field_len = eir[0];
1740 parsed += field_len + 1;
1742 if (parsed > eir_len)
1745 if (eir[1] != type) {
1746 eir += field_len + 1;
1750 /* Zero length data */
1755 *data_len = field_len - 1;
1763 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
1765 if (addr_type != ADDR_LE_DEV_RANDOM)
1768 if ((bdaddr->b[5] & 0xc0) == 0x40)
1774 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
1776 if (addr_type == ADDR_LE_DEV_PUBLIC)
1779 /* Check for Random Static address type */
1780 if ((addr->b[5] & 0xc0) == 0xc0)
1786 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
1787 bdaddr_t *bdaddr, u8 addr_type)
1789 if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
1792 return hci_find_irk_by_rpa(hdev, bdaddr);
1795 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
1800 if (min > max || min < 6 || max > 3200)
1803 if (to_multiplier < 10 || to_multiplier > 3200)
1806 if (max >= to_multiplier * 8)
1809 max_latency = (to_multiplier * 4 / max) - 1;
1810 if (latency > 499 || latency > max_latency)
1816 int hci_register_cb(struct hci_cb *hcb);
1817 int hci_unregister_cb(struct hci_cb *hcb);
1819 struct sk_buff *__hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1820 const void *param, u32 timeout);
1821 struct sk_buff *__hci_cmd_sync_ev(struct hci_dev *hdev, u16 opcode, u32 plen,
1822 const void *param, u8 event, u32 timeout);
1823 int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
1826 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
1828 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
1829 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
1831 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
1833 struct sk_buff *hci_cmd_sync(struct hci_dev *hdev, u16 opcode, u32 plen,
1834 const void *param, u32 timeout);
1836 u32 hci_conn_get_phy(struct hci_conn *conn);
1838 /* ----- HCI Sockets ----- */
1839 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
1840 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
1841 int flag, struct sock *skip_sk);
1842 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
1843 void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
1844 void *data, u16 data_len, ktime_t tstamp,
1845 int flag, struct sock *skip_sk);
1847 void hci_sock_dev_event(struct hci_dev *hdev, int event);
1849 #define HCI_MGMT_VAR_LEN BIT(0)
1850 #define HCI_MGMT_NO_HDEV BIT(1)
1851 #define HCI_MGMT_UNTRUSTED BIT(2)
1852 #define HCI_MGMT_UNCONFIGURED BIT(3)
1853 #define HCI_MGMT_HDEV_OPTIONAL BIT(4)
1855 struct hci_mgmt_handler {
1856 int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
1859 unsigned long flags;
1862 struct hci_mgmt_chan {
1863 struct list_head list;
1864 unsigned short channel;
1865 size_t handler_count;
1866 const struct hci_mgmt_handler *handlers;
1868 size_t tizen_handler_count;
1869 const struct hci_mgmt_handler *tizen_handlers;
1871 void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
1874 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
1875 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
1877 /* Management interface */
1878 #define DISCOV_TYPE_BREDR (BIT(BDADDR_BREDR))
1879 #define DISCOV_TYPE_LE (BIT(BDADDR_LE_PUBLIC) | \
1880 BIT(BDADDR_LE_RANDOM))
1881 #define DISCOV_TYPE_INTERLEAVED (BIT(BDADDR_BREDR) | \
1882 BIT(BDADDR_LE_PUBLIC) | \
1883 BIT(BDADDR_LE_RANDOM))
1885 /* These LE scan and inquiry parameters were chosen according to LE General
1886 * Discovery Procedure specification.
1888 #define DISCOV_LE_SCAN_WIN 0x12
1889 #define DISCOV_LE_SCAN_INT 0x12
1890 #define DISCOV_LE_TIMEOUT 10240 /* msec */
1891 #define DISCOV_INTERLEAVED_TIMEOUT 5120 /* msec */
1892 #define DISCOV_INTERLEAVED_INQUIRY_LEN 0x04
1893 #define DISCOV_BREDR_INQUIRY_LEN 0x08
1894 #define DISCOV_LE_RESTART_DELAY msecs_to_jiffies(200) /* msec */
1895 #define DISCOV_LE_FAST_ADV_INT_MIN 0x00A0 /* 100 msec */
1896 #define DISCOV_LE_FAST_ADV_INT_MAX 0x00F0 /* 150 msec */
1898 void mgmt_fill_version_info(void *ver);
1899 int mgmt_new_settings(struct hci_dev *hdev);
1900 void mgmt_index_added(struct hci_dev *hdev);
1901 void mgmt_index_removed(struct hci_dev *hdev);
1902 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
1903 void mgmt_power_on(struct hci_dev *hdev, int err);
1904 void __mgmt_power_off(struct hci_dev *hdev);
1905 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
1907 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
1908 u8 *name, u8 name_len);
1909 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
1910 u8 link_type, u8 addr_type, u8 reason,
1911 bool mgmt_connected);
1912 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
1913 u8 link_type, u8 addr_type, u8 status);
1914 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1915 u8 addr_type, u8 status);
1916 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
1917 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1919 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1921 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1922 u8 link_type, u8 addr_type, u32 value,
1924 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1925 u8 link_type, u8 addr_type, u8 status);
1926 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1927 u8 link_type, u8 addr_type, u8 status);
1928 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
1929 u8 link_type, u8 addr_type);
1930 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1931 u8 link_type, u8 addr_type, u8 status);
1932 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
1933 u8 link_type, u8 addr_type, u8 status);
1934 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
1935 u8 link_type, u8 addr_type, u32 passkey,
1937 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
1938 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
1939 void mgmt_ssp_enable_complete(struct hci_dev *hdev, u8 enable, u8 status);
1940 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
1942 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
1943 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
1944 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
1945 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1946 u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
1947 u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len);
1948 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
1949 u8 addr_type, s8 rssi, u8 *name, u8 name_len);
1950 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
1951 void mgmt_suspending(struct hci_dev *hdev, u8 state);
1952 void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
1954 bool mgmt_powering_down(struct hci_dev *hdev);
1955 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
1956 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
1957 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
1959 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
1960 u8 bdaddr_type, u8 store_hint, u16 min_interval,
1961 u16 max_interval, u16 latency, u16 timeout);
1962 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
1963 bool mgmt_get_connectable(struct hci_dev *hdev);
1964 void mgmt_set_connectable_complete(struct hci_dev *hdev, u8 status);
1965 void mgmt_set_discoverable_complete(struct hci_dev *hdev, u8 status);
1966 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
1967 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
1969 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
1971 void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
1972 int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
1973 int mgmt_add_adv_patterns_monitor_complete(struct hci_dev *hdev, u8 status);
1974 int mgmt_remove_adv_monitor_complete(struct hci_dev *hdev, u8 status);
1977 void mgmt_rssi_enable_success(struct sock *sk, struct hci_dev *hdev,
1978 void *data, struct hci_cc_rsp_enable_rssi *rp, int success);
1979 void mgmt_rssi_disable_success(struct sock *sk, struct hci_dev *hdev,
1980 void *data, struct hci_cc_rsp_enable_rssi *rp, int success);
1981 int mgmt_set_rssi_threshold(struct sock *sk, struct hci_dev *hdev,
1982 void *data, u16 len);
1983 void mgmt_rssi_alert_evt(struct hci_dev *hdev, u16 conn_handle,
1984 s8 alert_type, s8 rssi_dbm);
1985 void mgmt_raw_rssi_response(struct hci_dev *hdev,
1986 struct hci_cc_rp_get_raw_rssi *rp, int success);
1987 void mgmt_enable_rssi_cc(struct hci_dev *hdev, void *response, u8 status);
1988 int mgmt_device_name_update(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 *name,
1990 void mgmt_le_discovering(struct hci_dev *hdev, u8 discovering);
1991 int mgmt_le_conn_updated(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type,
1992 u8 dst_type, u16 conn_interval, u16 conn_latency,
1993 u16 supervision_timeout);
1994 int mgmt_le_conn_update_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
1995 u8 link_type, u8 addr_type, u8 status);
1996 void mgmt_hardware_error(struct hci_dev *hdev, u8 err_code);
1997 void mgmt_tx_timeout_error(struct hci_dev *hdev);
1998 /* Pass adv type in the le device found */
1999 void mgmt_le_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2000 u8 addr_type, u8 *dev_class, s8 rssi, u32 flags, u8 *eir,
2001 u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len, u8 adv_type);
2002 void mgmt_multi_adv_state_change_evt(struct hci_dev *hdev, u8 adv_instance,
2003 u8 state_change_reason, u16 connection_handle);
2004 void mgmt_6lowpan_conn_changed(struct hci_dev *hdev, char if_name[16],
2005 bdaddr_t *bdaddr, u8 addr_type, bool connected);
2006 void mgmt_le_read_maximum_data_length_complete(struct hci_dev *hdev,
2010 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
2012 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
2013 __u8 ltk[16], __u8 key_size);
2015 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
2018 #define SCO_AIRMODE_MASK 0x0003
2019 #define SCO_AIRMODE_CVSD 0x0000
2020 #define SCO_AIRMODE_TRANSP 0x0003
2022 #endif /* __HCI_CORE_H */